$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: FhFb+bo16qLKUVooBqRklDH31AiyLGwt3m64WRXCHus= Subject key identifier: 05:68:77:F5:EF:40:D4:5E:4D:BC:60:65:30:26:73:23:EB:24:CE:66 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584EEA875CC07E5467F11019CE40 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:5c:c0:7e:54:67:f1:10:19:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=70b87b6e-6cda-4d24-9371-d6af176fb389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:58:f3:7d:46:eb:0a:ba:9d:4d:b7:0d:d7: 4f:a1:5b:45:83:a6:35:b3:57:a7:26:c7:a3:6d:f0: bb:eb:bc:b6:8c:4b:fe:fb:5b:e0:61:14:ed:6c:0b: 85:bb:59:d6:53:3e:97:bd:2a:17:a6:3b:fc:87:08: d9:81:18:f5:93:77:2e:11:89:70:d8:08:3e:ff:b0: 8d:a5:2a:89:0e:ec:1f:ce:53:d6:c5:5d:61:46:f6: 8a:4c:1a:7a:6d:30:bf:84:47:45:94:2f:2d:0f:21: 9a:2f:e6:49:80:d1:e3:5a:6f:18:ca:49:75:37:ec: 48:1e:27:fd:29:49:30:f7:d8:c7:7e:2a:eb:82:ff: c5:be:67:2b:1d:f4:52:ab:e4:25:2f:96:89:e6:cf: 1b:06:43:1e:95:02:0f:12:47:91:8a:fa:66:6c:48: a8:b6:d2:fe:ae:54:0b:5f:84:31:f8:b7:b4:5b:b7: 25:ef:b0:64:90:0d:0f:05:d7:6a:cc:e5:70:a2:74: 09:fe:9b:2c:68:56:c0:21:bd:25:fb:e9:e1:dc:d7: 23:04:67:6b:69:ad:a6:6d:6d:d7:fc:b9:fa:07:55: 18:d6:96:1b:79:85:e2:b2:24:21:ed:13:d8:c2:0a: 80:56:7b:d5:57:dc:d0:7e:be:60:cc:f2:95:65:cf: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:68:77:F5:EF:40:D4:5E:4D:BC:60:65:30:26:73:23:EB:24:CE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:81:8c:d7:3b:16:17:bd:b4:a9:db:01:53:fd:19:72:13:ce: 2c:1e:91:86:17:f3:ff:70:26:49:cc:a8:91:59:86:29:c1:d2: 57:e6:ec:54:c6:b6:d2:bb:ef:c0:71:a9:c2:50:20:b0:eb:2b: 3a:bd:d2:f1:55:dd:ff:30:24:66:cc:dc:6d:1f:62:70:af:57: 87:e2:ad:18:05:44:52:fc:b4:33:45:9d:4f:69:29:15:1b:8d: 14:63:42:01:e0:e6:ab:ca:ef:cb:89:9c:ac:1a:c2:73:a3:53: 3f:0b:ac:b2:b5:e5:d9:39:5f:18:d2:4a:92:75:04:2a:58:d4: 51:e3:00:21:56:cb:92:ce:40:4a:2a:b2:e0:e8:82:15:e7:e3: b6:47:93:a2:b6:21:9c:83:37:e9:20:46:71:d5:1c:60:c5:9b: df:b3:36:1f:42:58:b8:0e:e6:5f:2c:64:46:e1:e9:96:10:fd: d5:af:d9:47:b0:e2:16:7c:a1:33:40:6a:53:3c:3d:c5:e3:6c: a9:96:f5:c1:71:42:b8:a5:5d:98:72:46:ac:ad:2d:a2:7e:ec: 3f:fa:bd:6c:8e:43:59:f8:32:2a:49:d8:fb:65:8d:5d:bb:2f: d0:9e:6e:1e:fd:0b:6f:58:7c:6e:30:10:be:17:da:16:a6:a4: e0:5c:34:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1zAflRn8RAZzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NzBiODdiNmUtNmNkYS00ZDI0LTkzNzEtZDZhZjE3NmZiMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomZY831G6wq6nU23DddPoVtFg6Y1s1enJsej bfC767y2jEv++1vgYRTtbAuFu1nWUz6XvSoXpjv8hwjZgRj1k3cuEYlw2Ag+/7CN pSqJDuwfzlPWxV1hRvaKTBp6bTC/hEdFlC8tDyGaL+ZJgNHjWm8Yykl1N+xIHif9 KUkw99jHfirrgv/FvmcrHfRSq+QlL5aJ5s8bBkMelQIPEkeRivpmbEiottL+rlQL X4Qx+Le0W7cl77BkkA0PBddqzOVwonQJ/pssaFbAIb0l++nh3NcjBGdraa2mbW3X /Ln6B1UY1pYbeYXisiQh7RPYwgqAVnvVV9zQfr5gzPKVZc+XAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVod/XvQNReTbxgZTAmcyPrJM5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGBjNc7Fhe9tKnbAVP9GXITziwekYYX8/9wJknMqJFZhinB0lfm7FTG ttK778BxqcJQILDrKzq90vFV3f8wJGbM3G0fYnCvV4firRgFRFL8tDNFnU9pKRUb jRRjQgHg5qvK78uJnKwawnOjUz8LrLK15dk5XxjSSpJ1BCpY1FHjACFWy5LOQEoq suDoghXn47ZHk6K2IZyDN+kgRnHVHGDFm9+zNh9CWLgO5l8sZEbh6ZYQ/dWv2Uew 4hZ8oTNAalM8PcXjbKmW9cFxQrilXZhyRqytLaJ+7D/6vWyOQ1n4MipJ2PtljV27 L9Cebh79C29YfG4wEL4X2hampOBcNJ4= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:08 2026 by rpki-client